Skip to content

chore(deps): bump valibot from 1.2.0 to 1.4.2 in the npm_and_yarn group across 1 directory#16503

Open
dependabot[bot] wants to merge 1 commit into
version-3from
dependabot/npm_and_yarn/npm_and_yarn-47390ece88
Open

chore(deps): bump valibot from 1.2.0 to 1.4.2 in the npm_and_yarn group across 1 directory#16503
dependabot[bot] wants to merge 1 commit into
version-3from
dependabot/npm_and_yarn/npm_and_yarn-47390ece88

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm_and_yarn group with 1 update in the / directory: valibot.

Updates valibot from 1.2.0 to 1.4.2

Release notes

Sourced from valibot's releases.

v1.4.2

Many thanks to @​Faze-up and @​chatman-media for contributing to this release.

  • Fix word count actions to cache the Intl.Segmenter for non-primitive locales, preventing it from being recreated on every words, minWords, maxWords and notWords validation (pull request #1521)
  • Fix flatten method to handle issue path keys that collide with Object.prototype members like toString instead of throwing a TypeError (pull request #1522)
  • Fix intersect schema to merge object keys that collide with Object.prototype members like toString instead of failing to merge them (pull request #1522)

v1.4.1

  • Fix intersect schema to infer correct input and output types for non-tuple array options instead of never (pull request #1478)

v1.4.0

Many thanks to @​ksaurav24, @​heiwen, @​compulim, @​ysknsid25, @​alaycock-stripe, @​IlyaSemenov, @​wszgrcy, @​LMGO, @​yslpn, @​EltonLobo07 and @​Eronmmer for contributing to this release.

Read the release notes on our website for a quick overview of the most exciting new features in this release.

  • Add isoDateTimeSecond validation action to validate ISO date times with seconds (pull request #1418)
  • Add toCamelCase, toKebabCase, toPascalCase and toSnakeCase transformation actions to convert strings between common naming conventions (pull request #1457)
  • Change internal ReadonlyOutputKeys and OutputWithReadonly types of object schemas and WithReadonly type of record schemas to improve TypeScript type performance (pull request #1442)
  • Change hot paths to reduce object allocations and improve runtime performance (pull request #1437)
  • Change build target to ES2020 so distributed output stays compatible with environments that lack support for newer syntax (pull request #1455)
  • Change internal _LruCache to use a TypeScript private method instead of a #private class field to avoid runtime helpers in the transpiled output (pull request #1455)
  • Change internal _isValidObjectKey to use Object.prototype.hasOwnProperty.call instead of Object.hasOwn so the distributed output stays compatible with runtimes that lack the ES2022 Object.hasOwn builtin (pull request #1421)
  • Change flatten method to accept readonly issue arrays (pull request #1269)
  • Fix potential RangeError caused by spreading large issue arrays (pull request #1437)
  • Fix creditCard validation action to reject Mastercard numbers with invalid lengths (pull request #1462)
  • Fix intersect schema to no longer mutate input values, allowing frozen objects and arrays to be merged (pull request #1463)

v1.4.0 (to-json-schema)

Many thanks to @​stefanprobst, @​sruenwg and @​cruzdanilo for contributing to this release.

  • Add support for examples action
  • Add support for integer when used with minValue and maxValue actions (pull request #1367)
  • Change Valibot peer dependency to v1.2.0
  • Fix conversion of exactOptional object properties (pull request #1220)
  • Fix conversion of variant to use oneOf instead of anyOf (pull request #1193)

v1.3.1

  • Change MAC48_REGEX, MAC64_REGEX and MAC_REGEX to drop the i flag for better JSON Schema compatibility (pull request #1430)
  • Change hash action to use case-expanded character classes instead of the i flag (pull request #1430)

v1.3.0

Many thanks to @​EskiMojo14, @​yslpn, @​alexilyaev, @​idleberg, @​BerkliumBirb and @​frenzzy for contributing to this release.

Read the release notes on our website for a quick overview of the most exciting new features in this release.

  • Add guard transformation action to narrow types using type predicates (pull request #1204)
  • Add parseBoolean transformation action to parse boolean values from strings and other types (pull request #1251)
  • Add isrc validation action to validate ISRC codes (pull request #1373)
  • Add cache method for caching schema output by input (pull request #1170)
  • Add domain validation action to validate domain names (pull request #1284)

... (truncated)

Commits
  • 0dc26ea Bump library version to 1.4.2
  • 1bd01c3 fix: handle keys that collide with Object.prototype in flatten and merge (#1522)
  • 752c636 docs: clarify string length semantics (#1505)
  • a3beff9 fix: cache word-count segmenter for non-primitive locales (#1521)
  • 1f9b183 Update FUNDING.yml in fabvor of Open Collective
  • 2c63b2a Update logos of partners in README
  • 09616b2 Add CodeRabbit as partner and remove Stainless
  • 92bcf55 Add Cloudflare to privacy policy page
  • 9bb6617 Add Cloudflare as a deploy target to our website (#1508)
  • c05bf95 Bump to-json-schema version to 1.7.1
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for valibot since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 1 update in the / directory: [valibot](https://github.com/open-circle/valibot).


Updates `valibot` from 1.2.0 to 1.4.2
- [Release notes](https://github.com/open-circle/valibot/releases)
- [Commits](open-circle/valibot@v1.2.0...v1.4.2)

---
updated-dependencies:
- dependency-name: valibot
  dependency-version: 1.4.2
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 24, 2026
@pkg-svelte-dev

Copy link
Copy Markdown

Install the latest version of @sveltejs/kit from 12b655b:

pnpm add https://pkg.svelte.dev/@sveltejs/kit/c/12b655b816dc1a9562f7863e7aad16f4c41a9e55

Open in pkg.svelte.dev: https://pkg.svelte.dev/repos/kit/pr/16503

@changeset-bot

changeset-bot Bot commented Jul 24, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 12b655b

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@svelte-docs-bot

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants